Senior Cyber Incident Responder (AVP) - JD

Reference: 51376Senior Cyber Incident ResponderLondonHybrid, 3 days on-siteUp to 80,000 base + bonus About the Role
We are looking for an experienced Senior Cyber Incident Responder to join our Cyber Security function and play a key role within our Incident Response capability.

This is a hands-on technical position focused on investigating and responding to complex cyber security incidents, while helping strengthen our wider approach to Security Monitoring, Digital Forensics and Threat Hunting.

You will work within a small, growing team with a broad remit, providing technical expertise throughout the incident lifecycle while helping improve how threats are detected, investigated and addressed.

Key ResponsibilitiesInvestigate and respond to complex cyber security incidents and potential security breaches.

Perform analysis across network and host-based artefacts, forensic evidence and suspicious activity.

Support the identification, containment, remediation and post-incident investigation of security threats.

Develop and refine Security Monitoring controls, detection use cases and indicators of compromise.

Contribute to Threat Hunting and Threat Intelligence capabilities and translate findings into improved detection.

Support the continued development of Incident Response procedures, playbooks and forensic processes.

Work closely with Cyber Security, technical and business teams to identify and mitigate security risks.

Contribute to Vulnerability Management, remediation and security control improvements.

Experience

RequiredStrong hands-on experience within Cyber Security Incident Response and Security Monitoring.

Experience conducting technical investigations using network and host-based artefacts.

Practical experience with Digital Forensics, packet analysis and Incident Response tooling.

Strong experience with SIEM, Security Monitoring and Threat Hunting.

Knowledge of frameworks and methodologies such as NIST, MITRE ATT&CK and Kill Chain.

Broad understanding of network, operating system, infrastructure and application security.

Experience with Vulnerability Management and security remediation.

Strong communication skills and the ability to work effectively during complex security incidents.

Relevant certifications such as GCIH, GCIA, GCFA or equivalent would be advantageous.

The Opportunity
This is an opportunity to join a growing Incident Response capability within a large global organisation, combining hands-on investigation with the opportunity to influence how Security Monitoring, Threat Hunting and Digital Forensics capabilities continue to develop.